Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/q4XrrNMV_7Jiw9tS0HwQNnciS-M.roa
File: q4XrrNMV_7Jiw9tS0HwQNnciS-M.roa (raw, json)
Hash identifier: WyifNhswQrwN75fN0hkNMI4C8P0r9/mvEAUefMhzrbw=
Subject key identifier: AB:85:EB:AC:D3:15:FF:B2:62:C3:DB:52:D0:7C:10:36:77:22:4B:E3
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 0193AAACA9409BA5301F3FE6A00B85E6E262
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/q4XrrNMV_7Jiw9tS0HwQNnciS-M.roa
Signing time: Mon 09 Dec 2024 09:07:42 +0000
ROA not before: Mon 09 Dec 2024 09:07:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49771
IP address blocks: 64.7.88.0/22 maxlen: 24
194.242.24.0/24 maxlen: 24
194.242.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:ac:a9:40:9b:a5:30:1f:3f:e6:a0:0b:85:e6:e2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Dec 9 09:07:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab85ebacd315ffb262c3db52d07c103677224be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:31:a1:59:86:14:e1:6c:20:cd:45:c8:99:
43:86:5a:91:fc:e3:48:d7:fd:52:32:bd:ee:e4:57:
79:cb:ad:72:95:1f:d9:8d:b3:75:c0:8d:ba:17:c7:
98:f6:f1:60:1b:a3:0c:3a:1c:9f:f8:e5:c8:2c:a6:
99:ec:9a:3e:f2:61:af:fd:c5:e6:ee:eb:70:aa:c8:
1e:69:38:25:39:05:81:2f:ec:53:cd:c6:db:19:6a:
b9:12:a5:74:a4:24:0a:5b:53:1c:a1:66:71:6a:5d:
26:99:29:62:e9:1a:97:77:4a:18:eb:b1:a9:fd:20:
5b:58:4c:ed:26:30:0c:21:b0:0f:a9:28:19:5d:77:
9f:04:ee:76:b7:e4:c2:0f:a9:61:f3:08:cb:5c:38:
4b:d3:5f:38:7b:80:20:4c:7c:28:64:1e:61:95:cc:
5d:db:cf:7c:84:33:d8:9e:db:5d:66:10:3d:97:af:
a7:10:64:32:24:50:1e:6c:88:2a:eb:ea:c4:c1:6d:
cd:68:51:61:83:e6:e9:1a:d1:8a:d1:22:80:4c:e7:
0e:39:bb:5d:3e:58:0c:b6:6e:a3:0e:df:86:54:db:
37:67:36:5e:da:9a:eb:6a:59:52:ed:f4:a2:51:66:
0b:4a:0d:2c:c8:a5:c1:5e:19:7f:a9:b5:20:64:29:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:85:EB:AC:D3:15:FF:B2:62:C3:DB:52:D0:7C:10:36:77:22:4B:E3
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/q4XrrNMV_7Jiw9tS0HwQNnciS-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.7.88.0/22
194.242.24.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:53:9b:fd:29:c7:48:bc:03:cc:4d:69:5d:11:2e:37:18:a7:
74:6a:f9:4e:50:0d:3a:ae:c2:32:6a:01:4c:b0:bb:42:99:56:
a6:6d:5b:c4:27:d5:af:df:86:3e:21:86:d2:e0:df:67:8d:2b:
bf:9c:2c:59:aa:b4:26:54:0a:ed:06:c4:67:94:54:bf:29:99:
b9:ed:5f:06:f5:6c:1d:5a:9a:e5:fc:48:ad:4a:c1:86:5c:c8:
88:00:f2:08:f2:53:f8:ca:30:6f:42:dd:24:1a:df:10:6d:2c:
b4:9d:b9:34:77:17:84:4e:ed:36:e7:d1:0b:b2:da:74:90:54:
5c:c0:f1:43:4c:15:a6:5c:ce:e6:3b:b1:7e:fd:9f:53:d2:68:
09:d2:c0:0c:aa:18:9d:ea:bd:b6:35:31:2b:f3:79:c2:c7:0d:
20:18:6a:cb:29:b9:61:ff:46:b8:16:a5:1a:79:14:31:d7:3b:
17:5e:68:f6:c6:50:8e:6a:c0:de:d7:1b:1a:e1:3e:7f:13:88:
71:34:ca:3d:25:e2:61:93:24:19:35:a2:d8:f4:d0:17:4a:90:
24:f7:56:ce:ba:2d:2f:bb:22:5e:99:37:18:10:fb:c4:0c:57:
6e:fd:3f:dd:c6:5c:c4:29:f3:8e:d7:fe:b4:b5:91:a8:ce:70:
79:88:6c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:35 2024 by rpki-client on console.sobornost.net